| 1 | <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>cifs.upcall</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.74.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="cifs.upcall.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>cifs.upcall — Userspace upcall helper for Common Internet File System (CIFS)</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">cifs.upcall</code> [-c] [-v] {keyid}</p></div></div><div class="refsect1" lang="en"><a name="id2522953"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>cifs.upcall is a userspace helper program for the linux CIFS client
|
|---|
| 2 | filesystem. There are a number of activities that the kernel cannot easily
|
|---|
| 3 | do itself. This program is a callout program that does these things for the
|
|---|
| 4 | kernel and then returns the result.</p><p>cifs.upcall is generally intended to be run when the kernel calls
|
|---|
| 5 | request-key(8) for a particular key type. While it
|
|---|
| 6 | can be run directly from the command-line, it's not generally intended
|
|---|
| 7 | to be run that way.</p></div><div class="refsect1" lang="en"><a name="id2483361"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-c</span></dt><dd><p>When handling a kerberos upcall, use a service principal that starts with "cifs/". The default is to use the "host/" service principal.
|
|---|
| 8 | </p></dd><dt><span class="term">-v</span></dt><dd><p>Print version number and exit.
|
|---|
| 9 | </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2483395"></a><h2>CONFIGURATION FOR KEYCTL</h2><p>cifs.upcall is designed to be called from the kernel via the
|
|---|
| 10 | request-key callout program. This requires that request-key be told
|
|---|
| 11 | where and how to call this program. The current cifs.upcall program
|
|---|
| 12 | handles two different key types:
|
|---|
| 13 | </p><div class="variablelist"><dl><dt><span class="term">cifs.spnego</span></dt><dd><p>This keytype is for retrieving kerberos session keys
|
|---|
| 14 | </p></dd><dt><span class="term">dns_resolver</span></dt><dd><p>This key type is for resolving hostnames into IP addresses
|
|---|
| 15 | </p></dd></dl></div><p>To make this program useful for CIFS, you'll need to set up entries for them in request-key.conf(5). Here's an example of an entry for each key type:</p><pre class="programlisting">
|
|---|
| 16 | #OPERATION TYPE D C PROGRAM ARG1 ARG2...
|
|---|
| 17 | #========= ============= = = ==========================================
|
|---|
| 18 | create cifs.spnego * * /usr/local/sbin/cifs.upcall -c %k
|
|---|
| 19 | create dns_resolver * * /usr/local/sbin/cifs.upcall %k
|
|---|
| 20 | </pre><p>
|
|---|
| 21 | See <a class="citerefentry" href="request-key.conf5..html"><span class="citerefentry"><span class="refentrytitle">request-key.conf(5)</span></span></a> for more info on each field.
|
|---|
| 22 | </p></div><div class="refsect1" lang="en"><a name="id2483582"></a><h2>SEE ALSO</h2><p>
|
|---|
| 23 | <a class="citerefentry" href="request-key.conf.5.html"><span class="citerefentry"><span class="refentrytitle">request-key.conf</span>(5)</span></a>,
|
|---|
| 24 | <a class="citerefentry" href="mount.cifs.8.html"><span class="citerefentry"><span class="refentrytitle">mount.cifs</span>(8)</span></a>
|
|---|
| 25 | </p></div><div class="refsect1" lang="en"><a name="id2483608"></a><h2>AUTHOR</h2><p>Igor Mammedov wrote the cifs.upcall program.</p><p>Jeff Layton authored this manpage.</p><p>The maintainer of the Linux CIFS VFS is Steve French.</p><p>The <a class="ulink" href="mailto:linux-cifs-client@lists.samba.org" target="_top">Linux
|
|---|
| 26 | CIFS Mailing list</a> is the preferred place to ask
|
|---|
| 27 | questions regarding these programs.
|
|---|
| 28 | </p></div></div></body></html>
|
|---|
